q2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3c:88:93:1b:2c:b6:3d:93:1f:86:07:ac was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:88:93:1b:2c:b6:3d:93:1f:86:07:ac
Serial Number (int): 18734209189905195804779743148
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 67:a1:14:11:66:12:7c:c3:1a:68:0c:c8:64:5a:f1:f0:81:90:b4:50
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 29:48:dc:34:5d:04:35:da:77:c9:ce:90:09:49:60:84:53:de:eb:1f
Fingerprint (sha256): 22:0e:be:28:86:96:97:6b:61:19:74:4e:71:8f:1b:85:18:5d:b9:61:97:9b:33:5e:43:60:3c:d8:30:c9:69:e4

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate q2.shared.global.fastly.net

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q2.shared.global.fastly.net
*.assets.pixlee.com
*.cms-sneak.viceops.net
*.concacafchampionsleague.com
*.feltapp.com
*.gofasturtle.com
*.govx.net
*.govxinc.com
*.hipmunk.com
*.iheartsitebuilder.com
*.infront.sport
*.internationalchampionscup.eu
*.internationalchampionscup.sg
*.legends.net
*.livebooks.com
*.myfreetaxes.com
*.mywebsites360.com
*.n8s.jp
*.nikkei.com
*.nordschleswiger.dk
*.pairs.lv
*.patriotx.com
*.perimeterx.com
*.pixlee.com
*.pixlee.tv
*.px-cdn.net
*.px-cloud.net
*.sneak.viceops.net
*.spacecrafted.com
*.static.pixlee.com
*.youversion.com
*.youversionapistaging.com
api.resourcewatch.org
apidocs.joyent.com
asroma.com
assets.safety.currys.co.uk
chillisauce.com
concacafchampionsleague.com
containersummit.io
docs.joyent.com
e.bravissimo.com
e.lowesplusplans.com
edt.cio.com
edt.computerworld.com
edt.csoonline.com
edt.infoworld.com
em.serviceprotectionadvantage.com
email.allegramarketingprint.com
email.amicusplc.co.uk
email.anatomfootwear.co.uk
email.blacksofgreenock.co.uk
email.cassart.co.uk
email.elitedangerous.com
email.frontier.co.uk
email.informaconnect.com
email.jurassicworldevolutiongame.com
email.museumselection.co.uk
email.museumselection.de
email.museumselection.fr
email.piabijoux.fr
email.piajewellery.com
email.planetcoaster.com
email.planetzoogame.com
email.prostatecanceruk.org
email.thecoughlincompany.com
email.utilityweek.co.uk
emails.britishmuseum.org
emails.cipscomms.org
fcdn-tf.thuuz.com
gifmagazine.net
goldcup.org
govx.net
govxinc.com
hipmunk.com
images.dev.yelpwifi.com
img.gifmagazine.net
infolettres.radio-canada.ca
internationalchampionscup.eu
internationalchampionscup.sg
joyent.com
legends.net
livebooks.com
lsdk.opera-mini.net
mail.cottages.com
mail.stlcountyparksfoundation.org
mail2.knect365.com
media1.tenor.co
media1.tenor.com
myfreetaxes.com
news.koganpage.com
nordschleswiger.dk
pairs.lv
patriotx.com
pixlee.com
pixlee.tv
registry.terraform.io
rpm.opera.com
rvm.io
skyviewobservatory.com
sp-prd.theglobeandmail.ca
spacecrafted.com
static.seatme.com
static.seatme.yelp.com
static.yelpreservations.com
tenor.co
test.chillisauce.com
webmail1.amnesty.org.uk
wifi-assets.fl.yelpcdn.com
wifi-fastly.getturnstyle.com
wifi.getturnstyle.com
www.culturewhisper.com
www.pixlee.gallery
www.pre7.nikkei.com
youversion.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for q2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nVN+FT//GZyn599l/We
YXb0MEgHscUTpHkm+FrrJHZY29pRhEMOSwU5LE0E6mxjyokgZfE9wk0B/42mqUny
sajGP2vmzBEoIHZU7+g2PV9igohYtXOV3DZDLfUeEzWqSEXVWIqeGBGlRObixCUu
FU7LWLTAyzJw7i064nIY7hgw+GMzsFmmCWuOR6OyD0YaOf8WZnBOAynvaBHAXKzv
BxrJY60X5miMkpxqfb/OOr3QLI7V0ShVKKb7ra6WypgF/MDEDsEVs0UcEYBu6HSS
9Oj6wAD4mhnn6Ev2NX7fsGlFlHBQr1NIdrSxbA3YqP6cT/8cpHRUBrdectP99Brs
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18734209189905195804779743148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 16:03:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-29 17:17:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'q2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29092655181819250885001094957598662887511315967997173566398666450650207409411732871523304213666089845893906999057213194351395294280323912686208491559306927097620294420361677300034983938500431774403713768100126337513205702598318825989237103827986102719474547585225098735244474226122056033564303514794940810240649739951496848949043183850077849571248608200593858496096145893394322146093126355609354333279851861219279208767868331956783447431162100391976666720920809852098049440647271151027061089205019032584048637151719215006603291786378297930335779330340721348524311861869492898146300321943293558471488325057023728872479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms-sneak.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feltapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofasturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iheartsitebuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infront.sport'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internationalchampionscup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internationalchampionscup.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywebsites360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n8s.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pairs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perimeterx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixlee.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.px-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.px-cloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sneak.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static.pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youversionapistaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.resourcewatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.safety.currys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillisauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concacafchampionsleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containersummit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.bravissimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.lowesplusplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.serviceprotectionadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.allegramarketingprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.amicusplc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.anatomfootwear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.blacksofgreenock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.cassart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.elitedangerous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.frontier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.informaconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.jurassicworldevolutiongame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piabijoux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piajewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.planetcoaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.planetzoogame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.prostatecanceruk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thecoughlincompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.utilityweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.britishmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.cipscomms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcdn-tf.thuuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipmunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dev.yelpwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.gifmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infolettres.radio-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalchampionscup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalchampionscup.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsdk.opera-mini.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cottages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stlcountyparksfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.knect365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreetaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.koganpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordschleswiger.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pairs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixlee.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpm.opera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvm.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyviewobservatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp-prd.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacecrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.seatme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.seatme.yelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.yelpreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.chillisauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.amnesty.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi-assets.fl.yelpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi-fastly.getturnstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.getturnstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturewhisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixlee.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre7.nikkei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youversion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67a1141166127cc31a680cc8645af1f08190b450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c652a0ec48ceb3fcab170992c43a87413309e80065a26252401ba3362a17c565000001740c9c64f90000040300473045022100c6185c05ee350ffe3f77fed898e691f1925648a1f4eecbfe0c9c93d36cb99311022023b09b8d53bdee96ec35341588dca3ae3846b55ec9aa4858767a584ac1ae6033007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001740c9c651b00000403004630440220208e4588c7fb432bb3dd3f92db81e9358a7ede88cb14efc6bf68a5981d193dcf0220719c019076bb00d1e5536f8f810d467a8b026838bc1bc3daa75ef295c9cf9e1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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